CN110661620B - Shared key negotiation method based on virtual quantum link - Google Patents
Shared key negotiation method based on virtual quantum link Download PDFInfo
- Publication number
- CN110661620B CN110661620B CN201910839386.8A CN201910839386A CN110661620B CN 110661620 B CN110661620 B CN 110661620B CN 201910839386 A CN201910839386 A CN 201910839386A CN 110661620 B CN110661620 B CN 110661620B
- Authority
- CN
- China
- Prior art keywords
- quantum
- virtual
- key
- shared
- link
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0838—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0852—Quantum cryptography
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Physics & Mathematics (AREA)
- Electromagnetism (AREA)
- Theoretical Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a shared key negotiation method based on a virtual quantum link, which comprises the following steps: the third-party server selects m virtual link states to respectively send the m virtual link states to the two service nodes, the two service nodes negotiate and adopt the associated key group of one service node as a shared key for each virtual link state, and the two service nodes adopt the same privacy enhancement method to carry out privacy enhancement on the m shared keys to obtain a shared session key. The shared session key negotiation process of the method is separated from the QKD network, so that the problems of the concurrency conflict and the credible relay delay of a scale relay link in the QKD network can be effectively solved; moreover, the confidentiality is enhanced based on a plurality of shared key components, and the security is higher. The embodiment of the invention has good application and popularization prospects in the application fields of mobile secret communication, mobile office systems, VPN (finance, electric power, energy, traffic and the like) and the like.
Description
Technical Field
The invention relates to the technical field of quantum key service, in particular to a shared key negotiation method based on a virtual quantum link.
Background
A Quantum node in a Quantum communication network generally consists of a classical communication unit connected to a classical communication network and a Quantum device unit connected to a Quantum Key Distribution (QKD) network. Due to the lack of practical no-landing quantum communication relay technology, quantum trusted relay technology is typically employed in QKD networks. Chinese patent grant publication No. CN 104243143B and application publication No. CN 106972922A disclose a mobile secure communication method based on a quantum key distribution network, which adopts a single-hop forwarding routing addressing relay method to transmit encrypted information to a terminal device bound to a remote centralized control station, and has the problems of security diffusion, low efficiency, large relay delay and the like. The method for the low-delay quantum key mobile service disclosed by the Chinese patent authorization publication No. CN 109995513A overcomes the problems of security diffusion, low efficiency, large relay delay and the like in the method to a certain extent. However, the above methods also have the problem of concurrent conflict of the quantum links in scale, and the security depends on the security of the single quantum link.
Disclosure of Invention
In order to solve the problems existing in the quantum key service technology in the background technology, the invention provides a shared key negotiation method based on a virtual quantum link, which comprises the following steps: the third-party server selects m virtual link states to be respectively sent to the two associated service nodes (wherein m is an integer larger than 1); for each virtual link state, the two service nodes negotiate to adopt the associated key packet of one service node as a shared key, and correspondingly, the other service node calculates the exclusive or value of the corresponding associated key packet stored by the other service node and the virtual link state data to obtain the shared key; the two service nodes adopt the same privacy enhancement method to carry out privacy enhancement on the m shared secret keys and obtain a shared session secret key; the virtual link state includes virtual link state data and an identifier thereof, and the virtual link state data is an exclusive or value of corresponding association key packets (or random number packets) of two service nodes associated with the virtual link state.
Optionally, the method further includes: and carrying out consistency check on the shared session key, and if the shared session key cannot pass the consistency check, renegotiating.
The invention has the following innovations: the shared key negotiation process of the method is separated from the QKD network, quantum key credible relay is carried out without coordinating QKD link resources in real time, and the problems of scale relay link concurrency conflict and credible relay delay existing in the QKD network can be effectively solved; and, multiple shared key components are negotiated based on multiple virtual quantum links and privacy enhancement is performed, and the security of the finally negotiated shared session key is higher. Based on higher service efficiency, higher safety and higher service flexibility, the embodiment of the invention has good application and popularization prospects in the application fields of mobile secret communication, mobile office systems, VPN (finance, electric power, energy, traffic and the like) and the like.
Drawings
Fig. 1 is a schematic diagram of a shared key negotiation method based on a virtual quantum link according to an embodiment of the present invention;
fig. 2 is a schematic diagram of a method for creating a virtual link state according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention and some terms and meanings thereof will be described below.
(1) The target quantum network to which embodiments of the present invention are applicable includes, but is not limited to, any of the following networks: quantum key distribution network, quantum communication network, quantum sensing network, quantum security internet, other networks which adopt a point-to-point single-hop landing forwarding mode for relay transmission; accordingly, target quantum nodes in embodiments of the invention include, but are not limited to: some or all of the quantum relay nodes in the target quantum network, some or all of the service nodes (or quantum access nodes) in the target quantum network. The target quantum node in the embodiment of the present invention is suitable for, but not limited to, a target quantum node accessing a target quantum network through a fiber interface and a wireless interface (or a free space interface).
(2) The target quantum relay node in the embodiment of the invention is a node used as a relay in a target quantum network, or a node which has at least two adjacent nodes on one or more relay links and is used as a relay, wherein the relay node does not store a key which is negotiated between the relay node and the adjacent nodes and is used for function virtualization of the relay node; a serving node (or access node) refers to other nodes in the target quantum network that are not used for relaying or are not used directly for relaying (in some possible designs, the serving node may be used for relaying through a virtual node); in addition, for a specific embodiment of the present invention, the corresponding target quantum network includes the relay node and the serving node included in the embodiment.
(3) The communication channels involved in embodiments of the invention for quantum networks include quantum channels and conventional communication network channels, wherein conventional communication network channels are employed for other communication processes except that quantum key distribution between adjacent quantum nodes (an adjacent quantum node refers to two nodes capable of normal point-to-point QKD or quantum communication) requires occupation of the quantum channel or link, and include, but are not limited to, one or more of wired communication and wireless/mobile/satellite communication channels.
(4) The terms "virtual node routing status", "virtual network status", "virtual link network status", and the like used in the embodiments of the present invention are only used for marking corresponding data or files, and are not used for limiting the corresponding data or files, and all schemes that are merely replacing names and have no substantive difference belong to the protection scope of the present invention.
(5) The shared key packet in the embodiment of the present invention is shared key data of a certain data length. Because different application systems have different requirements on the length of the shared key and the rate of the point-to-point QKD link has a certain difference, the invention does not specially limit the data length of the shared key packet; it is obvious that the data length refers to counting by the same data unit (e.g., bit, byte). In practice, the data length of the shared key packet (e.g., 2048 bits, 100 kbytes, 10 mbytes, 1 gbyte, or any other data length that meets the requirements of the system) may be determined according to the rate of encoding of the QKD system in actual use, the specific requirements of the application system, or future industry standard requirements. It should be clear that, for each virtualization process of the same embodiment, the shared key packets negotiated between all neighboring target nodes have the same data format (including but not limited to data type, data length, and data reading and writing order).
(6) The global identifier in the embodiment of the invention is a virtualized identifier for keeping all nodes in the target quantum network consistent, and the global identifier can be used for distinguishing different target quantum networks and also can be used for distinguishing different embodiments in the target quantum networks; the global identifier may adopt a global number unified in the whole network, or may adopt an identifier combining the target quantum network identifier and the global number.
In order to make the technical solutions and advantages of the present invention clearer, the present invention is described in detail below with reference to the accompanying drawings and specific embodiments.
Fig. 1 is a schematic diagram of a shared key negotiation method based on a virtual quantum link according to an embodiment of the present invention, where the method includes the following steps:
s101: the third-party server selects m virtual link states to be respectively sent to the two associated quantum service nodes (wherein m is an integer greater than 1);
s102: for each virtual link state, the two quantum service nodes negotiate to adopt the associated key packet of one quantum service node as a shared key, and correspondingly, the other quantum service node calculates the exclusive or value of the corresponding associated key packet stored by the other quantum service node and the virtual link state data to obtain the shared key;
s103: the two quantum service nodes adopt the same privacy enhancement method to carry out privacy enhancement on the m shared secret keys and obtain a shared session secret key;
the virtual link state comprises virtual link state data and an identifier thereof, wherein the virtual link state data is an exclusive or value of corresponding associated key packets (or random number packets) of two quantum service nodes associated with the virtual link state.
The security enhancement methods in the above embodiments include, but are not limited to: taking the m shared keys as input parameters of a cryptographic algorithm to perform encryption or decryption operation, and obtaining a random number with a data length not less than m, wherein the cryptographic algorithm includes but is not limited to: symmetric cryptographic algorithm, exclusive or operation function.
In a possible embodiment, the security enhancement method comprises: taking the m shared keys and a pre-shared key as input parameters of a cryptographic algorithm to carry out encryption or decryption operation, and obtaining a random number with the data length not less than m, wherein the cryptographic algorithm comprises: symmetric cryptographic algorithm, exclusive or operation function.
In a possible embodiment, on the basis of the above embodiment, the method may further include: and carrying out consistency check on the shared session key (or the random number), and if the consistency check cannot be passed, renegotiating.
The third party server in the above embodiments includes, but is not limited to, any one or more of the following devices: quantum key server, virtual link server, quantum service node device, network virtualization server device, wherein the device may access a virtual link state database or/and a virtual network state database or may obtain a plurality of virtual link states or/and virtual network states.
The sending in the above embodiments includes, but is not limited to, any one or more of the following options: the encryption transmission is carried out by adopting a symmetric cryptographic algorithm, the encryption transmission is carried out by adopting an asymmetric cryptographic algorithm, and the encryption transmission is carried out by adopting a tunnel mode or a transmission mode of VPN.
The third-party server in the above embodiment selects m virtual link states, including but not limited to: selecting m virtual link states from a virtual link state database of the target quantum network, or creating m virtual link states based on a plurality of virtual network states of the target quantum network; wherein creating m virtual link states based on the plurality of virtual network states of the target quantum network comprises: selecting one or more quantum key relay links between two quantum service nodes (respectively designated as a source node and a sink node for convenience) according to the selected one virtual network state, screening all virtual node routing data associated with the quantum key relay links from the virtual network state for each quantum key relay link, calculating an exclusive or value of all the virtual node routing data, and creating an identifier for the exclusive or value (for convenience, designating the exclusive or value as virtual link state data, designating the identifier as a virtual link state identifier, and designating the exclusive or value and the corresponding identifier as one virtual link state between the source node and the sink node); wherein the virtual node routing data comprises: an exclusive or value of a shared quantum key grouping between the target quantum node and two associated neighboring quantum nodes; the virtual link state identification comprises: global identification, identification of source node and sink node; the method for selecting a quantum key relay link between a source node and a sink node comprises the following steps: and selecting a quantum key relay link connected with the least quantum relay nodes or randomly selecting a communicable quantum key relay link according to the virtual network routing topological graph.
The virtual network states in the above embodiments include, but are not limited to: virtual node states of all quantum relay nodes (or quantum relay nodes and virtual quantum relay nodes) in the target quantum network having the same global identity; wherein a virtual node state comprises: some or all of the virtual node routing states of the target quantum node having the same global identity, wherein one virtual node routing state comprises: the xor value and its identification of the shared quantum key packet negotiated by the target quantum node and two adjacent target quantum nodes, respectively (for convenience, the xor value is hereinafter referred to as a virtual node routing state data, the identification is hereinafter referred to as a virtual node routing state identification, and the xor value and its identification are hereinafter referred to as a virtual node routing state).
The target quantum network in the above embodiments includes, but is not limited to, any of the following options: quantum key distribution network, quantum communication network, quantum sensing network, quantum security internet.
The method for creating virtual link state provided by the embodiment of the present invention is further described with reference to the QKD network shown in fig. 2. As shown in fig. 2, the target quantum nodes in the target quantum network include 5 quantum service nodes (S1, S2, S3, S4, and S5) and 5 quantum relay nodes (R1, R2, R3, R4, and R5), assuming that the shared quantum key negotiated between S1 and R1 is grouped into Ks1R 1; the shared quantum key negotiated between R1 and R2 is grouped as Kr1R2, and the shared quantum key negotiated between R1 and R5 is grouped as Kr1R 5; the shared quantum key negotiated between R2 and R3 is grouped as Kr2R 3; the shared quantum key group negotiated between R3 and R4 is Kr3R4, the shared quantum key group negotiated between R3 and R5 is Kr3R5 (Kr3R 5= Kr5R3, and the like), and the shared quantum key group negotiated between R3 and S3 is Kr3S 3; the shared quantum key negotiated between S4 and R5 is grouped as Ks4R 5; the shared quantum key negotiated between R4 and S2 is grouped as Kr4S 2; the shared quantum key negotiated between R4 and S5 is grouped as Kr4S 5.
The corresponding virtual network states include: the virtual node routing states of R (Ks1R ≧ Kr 1R), (Kr1R ≧ Kr 2R), 6 virtual node routing states of R (Kr2R ≤ Kr 3R), (Kr2R ≤ Kr3 s), (Kr2R ≤ Kr 5R), (Kr5R ≤ Kr3 s), and (Kr3s ≤ Kr 3R), the virtual node routing states of R (Kr3R ≤ Kr4 s), (Kr3R ≤ Kr 5R), (Kr4s ≤ Ks 5R), and the virtual node routing states of R (Ks4R ≤ Kr 1R), (k 4R 5R).
The corresponding virtual link network state includes a virtual link state between any two nodes of S1, S2, S3, S4, and S5, for example, a virtual link state between S1 and S2:
VQL _ s1s2= (Ks1r1 × (Kr1r 2) × (Kr1r2 × (Kr2r 3) × (Kr2r3 × (Kr3r 4) × (Kr3r4 × (Kr4s 2) = Ks1r1 × (Kr4s 2); and grouping Ks1r1 and Kr4S2 as associated shared quantum keys for nodes S1 and S2, respectively;
virtual link state between S1 and S3:
VQL_s1s3=(Ks1r1⊕Kr1r2)⊕(Kr1r2⊕Kr2r3)⊕(Kr2r3⊕Kr3s3)
=(Ks1r1⊕Kr1r5)⊕(Kr1r5⊕Kr5r3)⊕(Kr5r3⊕Kr3s3)=Ks1r1⊕Kr3s3；
the other (C (5,2) -2) virtual link states may be calculated in a similar manner.
A virtual link-state database of the target quantum network may be created using the above-described method.
Assume that in one virtual quantum link based shared key agreement procedure, 3 virtual link states associated with S1 and S3 are selected from one virtual link state database: VQL _ S1S3_ i = Ks1r1_ i ≧ Kr3S3_ i (where i =0,1, 2), and S1 negotiates with S3 using Ks1r1_0, Ks1r1_1, and Kr3S3_2 as shared key components, and may select an exclusive-or function to perform privacy enhancement on the above 3 shared key components, that is, S1 and S3 calculate Ks1r1_0 ^ Ks1r1_1 ^ Kr3S3_2, respectively; respectively calculating the Hash values of the XOR operation results, comparing whether the two Hash values are the same or not, and if the two Hash values are different, failing to negotiate; otherwise, the result of the exclusive-or operation may be used as a shared session key of S1 and S3.
In another possible design, based on the above virtual network states, S1, S2, S3, S4 and S5 may further generate random number packets RKs1, RKs2, RKs3, RKs4 and RKs5, respectively, and the corresponding virtual network states further include virtual node routing states of S1, S2, S3, S4 and S5 and their identifications (i.e., (RKs1 & ' Ks1r1), (RKs2 & ' Ks2r4), (RKs3 & ' Ks3r3), (RKs4 & ' Ks4r5) and (RKs5 & ' Ks5r 4)); the corresponding virtual link state becomes the exclusive or value of some two of the above random number packets RKs1, RKs2, RKs3, RKs4, and RKs 5.
Obviously, the quantum link of the QKD network is not required to be occupied for carrying out shared key negotiation based on the virtual link state, so that the problem of concurrent conflict of the scale quantum relay link in the traditional quantum key service method can be solved.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, apparatus (or system), or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (or systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While the invention has been described in conjunction with specific features and embodiments thereof, it will be evident that various modifications and combinations can be made thereto without departing from the spirit and scope of the invention. Accordingly, the specification and figures are merely exemplary of the invention as defined in the appended claims and are intended to cover any and all modifications, variations, combinations, or equivalents within the scope of the invention. It will be apparent to those skilled in the art that various changes and modifications may be made in the present invention without departing from the spirit and scope of the invention. Thus, if such modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include such modifications and variations.
Claims (10)
1. A shared key negotiation method based on a virtual quantum link is characterized by comprising the following steps: the third-party server selects at least 2 virtual link states to respectively send to the two associated service nodes, and aiming at each virtual link state, the two service nodes negotiate to adopt the associated key group of one service node as a first shared key, correspondingly, the other service node calculates the XOR value of the corresponding associated key group and the virtual link state data stored by the other service node and obtains a second shared key, the two service nodes respectively carry out security enhancement on at least 2 first shared keys and second shared keys by adopting the same security enhancement method and obtain a shared session key, wherein the virtual link state comprises virtual link state data and an identification thereof, the virtual link state data being an exclusive-or value of respective associated key packets or random number packets of the two service nodes with which the virtual link state is associated.
2. The method of claim 1, wherein the third-party server selects at least 2 virtual link states, and wherein the method comprises any one of the following methods: selecting at least 2 virtual link states from a virtual link state database of the target quantum network, creating at least 2 virtual link states based on the plurality of virtual network states of the target quantum network.
3. The method of claim 2, wherein the creating at least 2 virtual link states based on the plurality of virtual network states of the target quantum network comprises: for a selected one of the virtual network states, selecting one or more quantum key relay links between two service nodes, for each quantum key relay link, screening all virtual node routing data associated with the quantum key relay link from the virtual network state, calculating an exclusive-or value of all virtual node routing data, and creating an identifier for the exclusive-or value, wherein the virtual node routing data comprises: an exclusive-or value of a shared quantum key packet between a target quantum node and two associated neighboring quantum nodes, the identifying comprising: the method for selecting a quantum key relay link between two service nodes comprises the following steps: and selecting a quantum key relay link connected with the least quantum relay nodes or randomly selecting a communicable quantum key relay link according to the virtual network routing topological graph.
4. The method according to claim 2 or 3, wherein the virtual network state comprises: the virtual node states of all quantum relay nodes or quantum relay nodes and virtual quantum relay nodes in the target quantum network having the same global identity,
wherein a virtual node state comprises: some or all of the virtual node routing states of the target quantum node having the same global identity, wherein one virtual node routing state comprises: and the target quantum node and the two adjacent target quantum nodes respectively negotiate the exclusive or value and the identification of the shared quantum key group.
5. The shared key agreement method based on the virtual quantum link as claimed in claim 1, wherein the privacy enhancement method comprises: performing an encryption or decryption operation using at least 2 shared keys as input parameters of a cryptographic algorithm, wherein the cryptographic algorithm comprises: symmetric cryptographic algorithm, exclusive or operation function.
6. The shared key agreement method based on the virtual quantum link as claimed in claim 1, wherein the privacy enhancement method comprises: performing an encryption or decryption operation using at least 2 shared keys and a pre-shared key as input parameters of a cryptographic algorithm, wherein the cryptographic algorithm comprises: symmetric cryptographic algorithm, exclusive or operation function.
7. The method for sharing key agreement based on the virtual quantum link according to claim 1 or 5, characterized in that it comprises: and carrying out consistency check on the shared session key or the random number, and if the shared session key or the random number cannot pass the consistency check, renegotiating.
8. The method for sharing key agreement based on virtual quantum link according to claim 1 or 2, characterized in that the third party server comprises any one or more of the following devices: quantum key server, virtual link server, service node device, network virtualization server device, wherein the device may access a virtual link state database or/and a virtual network state database or may obtain a plurality of virtual link states or/and virtual network states.
9. The method of claim 1, wherein the sending comprises: an encrypted transmission, the encrypted transmission including any one of the following options: the encryption transmission is carried out by adopting a symmetric cryptographic algorithm, the encryption transmission is carried out by adopting an asymmetric cryptographic algorithm, and the encryption transmission is carried out by adopting a tunnel mode or a transmission mode of VPN.
10. The virtual quantum link-based shared key agreement method according to claim 2, wherein the target quantum network comprises any one of the following options: quantum key distribution network, quantum communication network, quantum sensing network, quantum security internet.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910839386.8A CN110661620B (en) | 2019-09-06 | 2019-09-06 | Shared key negotiation method based on virtual quantum link |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910839386.8A CN110661620B (en) | 2019-09-06 | 2019-09-06 | Shared key negotiation method based on virtual quantum link |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN110661620A CN110661620A (en) | 2020-01-07 |
| CN110661620B true CN110661620B (en) | 2022-04-01 |
Family
ID=69037983
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910839386.8A Active CN110661620B (en) | 2019-09-06 | 2019-09-06 | Shared key negotiation method based on virtual quantum link |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110661620B (en) |
Families Citing this family (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111342952B (en) * | 2018-12-18 | 2022-12-09 | 杭州希戈科技有限公司 | Safe and efficient quantum key service method and system |
| CN114389796A (en) * | 2020-10-16 | 2022-04-22 | 中创为(成都)量子通信技术有限公司 | Quantum cloud key negotiation method, device and system, quantum and quantum cloud server |
| CN112671471B (en) * | 2020-12-10 | 2023-08-15 | 国网新疆电力有限公司信息通信公司 | Turbo data coordination method and system suitable for quantum key distribution satellite network |
| EP4298757A1 (en) * | 2021-02-23 | 2024-01-03 | Telefonaktiebolaget LM Ericsson (publ) | Method and apparatus for a software defined network |
| CN113193957B (en) * | 2021-05-10 | 2023-03-31 | 成都量安区块链科技有限公司 | Quantum key service method and system separated from quantum network |
| CN113193958B (en) * | 2021-05-10 | 2023-07-07 | 成都量安区块链科技有限公司 | Quantum key service method and system |
| CN113328853B (en) * | 2021-05-25 | 2023-09-08 | 成都量安区块链科技有限公司 | Coalition chain system for improving security by adopting quantum key |
| CN113676315B (en) * | 2021-07-04 | 2024-04-30 | 河南国科量子通信技术应用研究院 | Slicing application method of star-ground integrated quantum network |
| CN113489586B (en) * | 2021-07-26 | 2023-01-31 | 河南国科量子通信网络有限公司 | VPN network system compatible with quantum key negotiation |
| CN113726527A (en) * | 2021-09-28 | 2021-11-30 | 河南国科量子通信技术应用研究院 | Quantum safety data protection method in field operation scene |
| CN113839778B (en) * | 2021-11-29 | 2022-02-18 | 军事科学院系统工程研究院网络信息研究所 | Secure virtual connection protocol method and system for access router |
| CN114268441B (en) * | 2022-03-03 | 2022-05-31 | 成都量安区块链科技有限公司 | Quantum security application method, client device, server device and system |
Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109995510A (en) * | 2017-12-29 | 2019-07-09 | 成都零光量子科技有限公司 | A kind of quantum key relay services method |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105827397B (en) * | 2015-01-08 | 2019-10-18 | 阿里巴巴集团控股有限公司 | Quantum key distribution system, method and device based on credible relaying |
-
2019
- 2019-09-06 CN CN201910839386.8A patent/CN110661620B/en active Active
Patent Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109995510A (en) * | 2017-12-29 | 2019-07-09 | 成都零光量子科技有限公司 | A kind of quantum key relay services method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN110661620A (en) | 2020-01-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110661620B (en) | Shared key negotiation method based on virtual quantum link | |
| CN110581763B (en) | Quantum key service block chain network system | |
| US11595196B2 (en) | Quantum key distribution method and device, and storage medium | |
| CN109995510B (en) | Quantum key relay service method | |
| CN102804677B (en) | Discovery of secure network enclaves | |
| CN110690928B (en) | Quantum relay link virtualization method and device | |
| CN110677241B (en) | Quantum network virtualization architecture method and device | |
| CN110690961B (en) | Quantum network function virtualization method and device | |
| CN110690964B (en) | Quantum service block chain creation method and application system | |
| CN105847228A (en) | Access control framework for information centric networking | |
| CN110690962B (en) | Application method and device of service node | |
| CN112367163B (en) | Quantum network virtualization method and device | |
| CN110690960B (en) | Routing service method and device of relay node | |
| CN113193957B (en) | Quantum key service method and system separated from quantum network | |
| CN111342952B (en) | Safe and efficient quantum key service method and system | |
| CN112367160B (en) | Virtual quantum link service method and device | |
| CN113193958B (en) | Quantum key service method and system | |
| CN107493287A (en) | Industry control network data security system | |
| CN112367124B (en) | Quantum relay node virtualization method and device | |
| CN115174188A (en) | Message transmission method and device, electronic equipment and storage medium | |
| CN112367161A (en) | Relay node function virtualization method and device | |
| Al-Kaabi et al. | An overview of the status, challenges, and trends of the advanced crypto algorithms to enhance the security of wireless networks | |
| KR20130077201A (en) | Method and device for performing encrypted communication with load balancing in ipsec vpn | |
| Al-Kaabi et al. | The status, challenges, and future trends of advanced crypto algorithms for wireless network security: An Overview | |
| CN114257314B (en) | Quantum encryption communication method based on multiparty security calculation |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |